e7f04f0ee06f2addd4f33ecddfd4981d5f7a05f0a596d02acb630cb5377beac0

Sharing

Copy URL Twitter E-mail

General

Target
e7f04f0ee06f2addd4f33ecddfd4981d5f7a05f0a596d02acb630cb5377beac0
Size 19KB
Sample260204-td8rssdz7a
SHA256 e7f04f0ee06f2addd4f33ecddfd4981d5f7a05f0a596d02acb630cb5377beac0
MD5 f017de2a359a2993859c342757f6ab66
SHA1 5f8a9573823cd52614b337e1d2cd5e07796b7978
SHA512 7b79e5c3dca730119519f6bd44fbe043fd2691b8e9738d054da87bf4eaad1aec43e2948659a702d1560fcf0b01344fcaf37db06a519f8cbe4c1c819d02b9de40
SSDEEP 384:Y/wwN8zNJNFz/fpfXMPth+oOaB8BYsscDRk:MVOXflXWeoOXscDRk
TLSH
T19A925B17FB960AEEE41BD278C455642FD0B5341D2322E7FF87918A211E762D0AF3634A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7f04f0ee06f2addd4f33ecddfd4981d5f7a05f0a596d02acb630cb5377beac0

File Explorer

e7f04f0ee06f2addd4f33ecddfd4981d5f7a05f0a596d02acb630cb5377beac0

.exe 19KB

e7f04f0ee06f2addd4f33ecddfd4981d5f7a05f0a596d02acb630cb5377beac0

IMPHASH 6b229c4aa1aae59badf58a0f6071a347
SHA256 e7f04f0ee06f2addd4f33ecddfd4981d5f7a05f0a596d02acb630cb5377beac0
MD5 f017de2a359a2993859c342757f6ab66
SHA1 5f8a9573823cd52614b337e1d2cd5e07796b7978
SHA512 7b79e5c3dca730119519f6bd44fbe043fd2691b8e9738d054da87bf4eaad1aec43e2948659a702d1560fcf0b01344fcaf37db06a519f8cbe4c1c819d02b9de40
SSDEEP 384:Y/wwN8zNJNFz/fpfXMPth+oOaB8BYsscDRk:MVOXflXWeoOXscDRk
TLSH
T19A925B17FB960AEEE41BD278C455642FD0B5341D2322E7FF87918A211E762D0AF3634A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10364

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

CryptReleaseContext CryptSetKeyParam CheckTokenMembership FreeSid CryptDestroyHash CryptHashData CryptDeriveKey CryptCreateHash AllocateAndInitializeSid CryptGenRandom CryptEncrypt CryptAcquireContextA CryptDestroyKey

shell32

ShellExecuteExA SHGetKnownFolderPath ShellExecuteA

ole32

CoTaskMemFree

wininet

InternetCloseHandle InternetOpenA HttpOpenRequestA HttpSendRequestA InternetConnectA

kernel32

IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleFileNameA CloseThreadpool CreateThreadpool FindFirstFileA GetDriveTypeA FindNextFileA FindClose CloseThreadpoolCleanupGroup CloseThreadpoolCleanupGroupMembers Sleep GetLastError CreateThreadpoolCleanupGroup SubmitThreadpoolWork CreateThreadpoolWork RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetModuleHandleW

vcruntime140

memset __C_specific_handler strstr __current_exception strrchr __current_exception_context memcpy

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _initialize_onexit_table _crt_atexit terminate exit _seh_filter_exe _set_app_type _configure_narrow_argv _exit _get_initial_narrow_environment _initterm _initterm_e _initialize_narrow_environment _register_thread_local_exe_atexit_callback __p___argc __p___argv _cexit _c_exit

api-ms-win-crt-utility-l1-1-0

srand rand

api-ms-win-crt-stdio-l1-1-0

fopen fread __p__commode feof __acrt_iob_func fclose __stdio_common_vsprintf fwrite __stdio_common_vfprintf _set_fmode

api-ms-win-crt-filesystem-l1-1-0

remove _stat64i32

api-ms-win-crt-string-l1-1-0

_stricmp _strdup

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

malloc free _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

e7f04f0ee06f2addd4f33ecddfd4981d5f7a05f0a596d02acb630cb5377beac0

advapi32

shell32

ole32

wininet

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic